
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json)
Hash identifier: ss48KKMMMb5nj1BQBgPKCQU52/WP66flJ+EEcZh4Gjg=
Subject key identifier: 15:29:0C:A0:B5:C9:41:74:8A:E8:DB:21:69:05:32:42:A3:5F:28:C2
Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Certificate serial: 0276
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
Manifest number: 0270
Signing time: Sun 01 Mar 2026 02:33:37 +0000
Manifest this update: Sun 01 Mar 2026 02:33:37 +0000
Manifest next update: Sun 08 Mar 2026 02:33:37 +0000
Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: 4IGrXQr5lw7W5+nc2sc7KoQN+nXtSjqC6LSlFhpCGSA=)
2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: S8UZRzpubYCJ+X0jACj9ZehbJ6hRsnjRgE1noRmlqCA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Validity
Not Before: Mar 1 02:33:37 2026 GMT
Not After : Mar 8 02:33:37 2026 GMT
Subject: CN=69a3a581-b40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:9a:c1:cf:76:79:8c:56:e2:82:df:2d:96:
49:aa:34:67:ab:64:aa:32:59:df:2b:72:80:bb:1c:
f2:18:2f:92:50:b8:f3:85:0b:c9:b5:1e:bd:57:05:
f5:c9:82:4b:13:70:01:f1:7e:1f:56:de:de:aa:e9:
42:c4:e3:9d:1f:54:27:cc:e7:36:ac:72:f6:aa:f1:
15:e5:c0:0c:93:65:c7:06:12:82:14:cf:c6:11:4e:
09:a1:62:2f:2b:31:50:c7:73:11:ae:c0:34:3f:8d:
39:87:b8:0f:3c:94:94:14:2f:4c:74:3b:ff:4d:ec:
f4:4c:b4:96:cb:36:a2:7d:06:9f:45:27:53:56:22:
0e:be:8d:a9:16:c8:3a:c2:d5:db:0b:4b:da:7d:6e:
1a:2f:00:88:4d:da:4d:2a:97:12:e0:25:4b:15:ef:
ee:e0:24:6a:80:a8:6f:50:96:ee:83:49:dd:f6:e2:
b4:11:b3:c1:16:fd:eb:26:df:cb:d2:f6:11:0c:b8:
9c:db:ef:5e:fe:06:5c:59:20:05:cc:2f:13:59:1f:
6d:01:bc:dd:a9:53:01:93:1d:90:60:11:1f:bb:22:
60:4e:03:10:b2:9a:2d:9a:87:63:fc:a8:0c:5c:c4:
1a:36:c3:02:81:38:18:94:aa:a3:cf:c4:fd:2b:ec:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:29:0C:A0:B5:C9:41:74:8A:E8:DB:21:69:05:32:42:A3:5F:28:C2
X509v3 Authority Key Identifier:
keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ec:80:0c:ed:b0:8c:95:e6:44:c4:77:d7:0f:dc:59:1c:66:
c4:20:16:d5:06:7b:92:10:45:08:fb:cc:f7:a6:48:0b:c4:fd:
1c:7e:95:78:42:03:e3:22:d3:76:29:c9:44:b5:76:70:df:42:
5f:f1:53:3c:0a:96:d3:5d:1a:66:73:03:0e:43:88:f5:2e:cf:
f0:c4:31:6c:46:a3:55:27:9d:0a:3a:88:a7:43:52:d0:7f:24:
4e:41:7c:7a:92:4d:9a:36:0e:04:a6:57:ea:13:6b:67:30:71:
c0:4e:15:c8:5d:3f:21:92:c8:d7:03:c7:59:b0:4e:57:a8:eb:
62:a8:b1:bc:75:02:4a:60:81:28:00:96:79:39:18:ab:80:1b:
fa:c5:e3:79:1e:34:7c:bc:b5:b1:2c:f1:aa:a2:12:1a:57:93:
55:d0:e9:30:af:45:47:c2:7c:24:16:2d:99:88:76:18:79:ef:
99:50:ff:61:2d:f8:f1:e4:e6:07:28:4e:03:b3:f6:89:19:be:
9f:82:15:f3:c1:6f:08:dc:99:e7:28:f7:f2:46:91:6d:69:ba:
c4:a3:b0:d8:ad:8d:ce:d7:63:8e:30:bf:80:25:72:97:cb:9a:
0f:e0:32:06:cd:70:db:2a:d1:bd:60:2a:b9:28:36:6d:a8:7a:
cb:a2:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:54 2026 by rpki-client